From 4e727d69c26b56f90ce11bfc561a3cc1999279f4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Aur=C3=A9lien=20Bompard?= <aurelien@bompard.org>
Date: Fri, 24 Oct 2025 11:22:03 +0200
Subject: [PATCH] IPA-tuura: restart sssd on config change
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Aurélien Bompard <aurelien@bompard.org>
---
 roles/ipatuura/handlers/main.yml |  5 +++++
 roles/ipatuura/tasks/main.yml    | 38 +++++++++++++++++---------------
 2 files changed, 25 insertions(+), 18 deletions(-)

diff --git a/roles/ipatuura/handlers/main.yml b/roles/ipatuura/handlers/main.yml
index 8c254c108a..268f507ab8 100644
--- a/roles/ipatuura/handlers/main.yml
+++ b/roles/ipatuura/handlers/main.yml
@@ -4,3 +4,8 @@
 
 - name: Restart ipatuura
   service: name=ipatuura  state=restarted
+
+- name: Restart sssd
+  ansible.builtin.service:
+    name: sssd
+    state: restarted
diff --git a/roles/ipatuura/tasks/main.yml b/roles/ipatuura/tasks/main.yml
index f135768500..ef350ee91b 100644
--- a/roles/ipatuura/tasks/main.yml
+++ b/roles/ipatuura/tasks/main.yml
@@ -126,24 +126,24 @@
   tags:
   - ipatuura
 
-- name: Copy the sudoers file for apache
-  ansible.builtin.copy:
-    src: sudoers
-    dest: /etc/sudoers.d/ipa-tuura
-    owner: root
-    group: root
-    mode: 0440
-  tags:
-  - ipatuura
-
-- name: Add Apache to the sssd group to edit the sssd.conf file
-  ansible.builtin.user:
-    name: apache
-    append: yes
-    groups:
-      - sssd
-      # Yeah that's rather concerning! Talk to upstream to avoid needing this.
-      - root
+# - name: Copy the sudoers file for apache
+#   ansible.builtin.copy:
+#     src: sudoers
+#     dest: /etc/sudoers.d/ipa-tuura
+#     owner: root
+#     group: root
+#     mode: 0440
+#   tags:
+#   - ipatuura
+# 
+# - name: Add Apache to the sssd group to edit the sssd.conf file
+#   ansible.builtin.user:
+#     name: apache
+#     append: yes
+#     groups:
+#       - sssd
+#       # Yeah that's rather concerning! Talk to upstream to avoid needing this.
+#       - root
 
 #
 # App
@@ -258,6 +258,8 @@
     owner: root
     group: sssd
     mode: "0640"
+  notify:
+  - Restart sssd
   tags:
   - ipatuura